Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-3514

RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability

Description

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to execute arbitrary executable file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Razer Razer Central

Default version status: unaffected

  • 0 to ≤ 7.11.0.558affected

References